Getting Data In

Couldnt able to login web url of splunk

khusain_splunk
Splunk Employee
Splunk Employee

After splunk indexer server restart we are getting 500 inetrnal server error , though the splunk service is up and running . We are getting below error .

fyi:
500 Internal Server Error

Return to Splunk home page

View more information about your request (request ID = 5c531015df7ff8cb7f3b90) in Search

Nothing I found in web_services.log,splunkd.log. Any help?

Tags (1)
0 Karma

lakshman239
Influencer

On an indexer, you don't normally need to have 8000/web port open. Have you got any config to disable web port?

0 Karma

khusain_splunk
Splunk Employee
Splunk Employee

Hi,

If nothing relevant found in log files then try below command to make sure if default files have not corrupted.

./splunk validate files

https://docs.splunk.com/Documentation/Splunk/7.2.1/Admin/ChecktheintegrityofyourSplunksoftwarefiles

Splunk reinstall or upgrade will fix the issue.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...